Privacy policy

1. Data protection at a glance

General information

The following information gives you an overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data collection on this website

Data on this website is processed by the operator of the website. You will find the contact details of the controller in the section “Controller” of this privacy policy.

Some of the data is collected when you provide it to us, for example by filling in a contact form or by contacting us by e-mail.

Other data is collected automatically when you visit the website, by the web server or by the technical systems in use. This is in particular technical data such as browser type, operating system, time of the page request and IP address.

What do we use your data for?

Part of the data is processed in order to ensure that the website is provided free of technical errors and securely. Other data may be used to handle your enquiries and to carry out pre-contractual or contractual measures.

2. Controller

The controller responsible for data processing on this website is:

TOV «Центр професійних закупівель» (Tsentr profesiinykh zakupivel)
Legal form: Товариство з обмеженою відповідальністю (LLC)
Kharkivske shose 56, prym. 757A
02175 Kyiv
Ukraine

Represented by:
Zhaliuk Oleksandr Ivanovych

Telephone: +380 68 699 99 67
E-mail: team.buypro@gmail.com

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

3. Hosting

This website is hosted with the following provider:

Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy, L-1855 Luxembourg

The servers are located in the eu-central-1 region (Frankfurt am Main, Germany).

When you visit this website, the hosting provider processes various technical data. This may include in particular the following data:

• IP address;
• date and time of the request;
• page or file requested;
• browser type and browser version;
• operating system used;
• referrer URL;
• host name of the accessing device;
• message about a successful or failed request.

This data is processed in order to provide the website securely, stably and without errors, on the basis of Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest lies in the secure and technically reliable presentation of our online offering.

As a rule, the server log files are stored only for as long as is necessary to ensure the security and functioning of the website. They may be stored for longer if there are specific indications of unlawful use or of a security incident.

Where required, a data processing agreement pursuant to Art. 28 DSGVO has been concluded with the hosting provider.

4. General information on data processing

Legal bases

We process personal data only where there is a legal basis for doing so.

If you have consented to the processing of your personal data, the processing takes place on the basis of Art. 6 Abs. 1 lit. a DSGVO. Consent that has been given can be withdrawn at any time with effect for the future.

If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, it takes place on the basis of Art. 6 Abs. 1 lit. b DSGVO.

Where the processing is necessary for compliance with a legal obligation, it takes place on the basis of Art. 6 Abs. 1 lit. c DSGVO.

In other cases, the processing may take place on the basis of our legitimate interests pursuant to Art. 6 Abs. 1 lit. f DSGVO.

Storage period

Unless a specific storage period is stated in this privacy policy, we store personal data only for as long as is necessary for the respective purpose of processing.

If you make a justified request for erasure or withdraw your consent, the data concerned will be deleted, unless statutory retention obligations or other permissible reasons for further storage exist.

Recipients of personal data

Personal data may be transmitted to external service providers where this is necessary for the operation of the website, for handling an enquiry or for the performance of a contract.

Where service providers process personal data on our behalf, we conclude a data processing agreement pursuant to Art. 28 DSGVO with them where required.

Your data will not be passed on for advertising purposes without your express consent.

5. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can recognise an encrypted connection by the fact that the address bar of your browser begins with “https://” and a padlock symbol is displayed.

When encryption is active, the data you transmit to us generally cannot be read by third parties.

6. Contacting us

Contact by e-mail or telephone

If you contact us by e-mail or telephone, we process the data you provide in order to handle your enquiry and any follow-up questions.

The processing takes place pursuant to Art. 6 Abs. 1 lit. b DSGVO if your enquiry is connected with the initiation or performance of a contract. In all other cases, the processing takes place on the basis of our legitimate interest in handling enquiries pursuant to Art. 6 Abs. 1 lit. f DSGVO.

The transmitted data will be deleted as soon as the purpose of the processing no longer applies and no statutory retention obligations or other legal grounds for further storage exist.

Contact form

If you contact us via the contact form, we process the data entered there in order to handle your enquiry.

In particular, the following data may be processed:

• name;
• e-mail address;
• telephone number, if provided;
• company, if provided;
• content of your message;
• date and time of the enquiry.

Mandatory fields are required so that we can handle your enquiry. You may provide voluntary information at your own discretion.

The processing takes place pursuant to Art. 6 Abs. 1 lit. b DSGVO if the enquiry serves the initiation or performance of a contract. In all other cases it takes place on the basis of our legitimate interest in handling enquiries efficiently pursuant to Art. 6 Abs. 1 lit. f DSGVO.

7. Cookies and similar technologies

This website may use cookies or comparable technologies. Cookies are small data records that are stored on your device.

Technically necessary cookies are used where they are required in order to provide the functions of the website that you have expressly requested. The processing takes place on the basis of § 25 Abs. 2 TDDDG and, insofar as personal data is processed, on the basis of Art. 6 Abs. 1 lit. f DSGVO.

Cookies that are not technically necessary, as well as analytics, marketing or tracking technologies, are used only with your prior consent. The legal bases are § 25 Abs. 1 TDDDG and Art. 6 Abs. 1 lit. a DSGVO.

You can withdraw or change consent you have given at any time with effect for the future, via the cookie settings provided on the website.

8. External links

This website may contain links to websites of external providers. When you open such a link, you leave our website.

The respective operator is responsible for the processing of personal data on external websites. Please refer to the privacy policies of the respective providers.

9. Uploading photos of your room

In order to show a piece of furniture true to scale, you can upload a photo of your room. The photo is stored on our server and is assigned exclusively to your browser session. Other visitors have no access to it.

For this assignment we set a technically necessary cookie containing a random identifier. No personal master data is linked to it.

Uploaded photos and the snapshots created from them are deleted automatically and completely no later than 24 hours after the last upload.

The legal basis is Art. 6 Abs. 1 lit. b DSGVO, since the processing is necessary in order to provide the function you have requested.

Please do not upload photos in which people can be recognised.

10. Removing an object from your photo

The room scan screen lets you photograph a piece of furniture, tap it and remove it from the picture before trying out a replacement. Aiming the camera, outlining whatever you tapped and measuring the room all run on your own device; nothing is sent anywhere for this part.

Only when you press the button to remove the object does a transfer take place: one still frame of your room and the outline you drew are sent to Amazon Bedrock, the image processing service of our hosting provider Amazon Web Services, where the model Stability AI Stable Image Erase Object removes the marked piece and returns the edited image.

This processing takes place in the United States (region us-east-1), because the model is not offered in any European region. The transfer is covered by the data processing agreement with Amazon Web Services and by the European Commission's Standard Contractual Clauses. The image is not used to train models. Only that one still frame is sent; the live camera feed never leaves your phone, and no image is sent unless you press the button.

The legal basis for this processing is Art. 6 Abs. 1 lit. f DSGVO: showing the piece of furniture in your own room is the very purpose you came to this website for. The edited image is stored together with your other guest files and, like them, deleted automatically no later than 24 hours after your last activity.

11. Your rights

Within the scope of the statutory requirements, you have in particular the following rights:

• right of access pursuant to Art. 15 DSGVO;
• right to rectification pursuant to Art. 16 DSGVO;
• right to erasure pursuant to Art. 17 DSGVO;
• right to restriction of processing pursuant to Art. 18 DSGVO;
• right to data portability pursuant to Art. 20 DSGVO;
• right to object pursuant to Art. 21 DSGVO;
• right to withdraw consent that has been given, with effect for the future;
• right to lodge a complaint with a competent data protection supervisory authority pursuant to Art. 77 DSGVO.

To exercise your rights, you can contact us at the following address:

E-mail: team.buypro@gmail.com

12. Objection to direct advertising

If personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purposes of such advertising.

Following your objection, your personal data will no longer be used for these purposes.

13. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the DSGVO.

In particular, you may contact a supervisory authority in the country of your habitual residence, your place of work or the place of the alleged infringement.

14. Transfer of data to third countries

The controller is established in Ukraine. Personal data may therefore be processed outside the European Union or the European Economic Area.

When personal data is transferred to a third country, we observe the statutory requirements of Art. 44 ff. DSGVO and take appropriate safeguards where necessary.

You can request further information about the safeguards used at the following address:

E-mail: team.buypro@gmail.com

15. Changes to this privacy policy

We reserve the right to adapt this privacy policy if the services we use, the legal requirements or our processing activities change.

The version published on this website at the given time applies.

Last updated: August 2026